nexposecli 0.1.10 → 0.1.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0a25b28eb27fe6450fe616722b113052efa6eeac
-  data.tar.gz: b403559dba0087ea4c21e165890a82d0d271df67
+  metadata.gz: 968b4f2a9521ee6815e540d307b61cf5b2f76353
+  data.tar.gz: 0c4371aada7b56260ca163b473b491c5f1a7cb52
 SHA512:
-  metadata.gz: ea866198713cdd4068e0456c5487451f6e3a5b639d22d7b8d52c4940726b3a3231b0259eb433a2218b150a1fe7a551fcfcbd7036948fbae2bcc0d486806ba1fb
-  data.tar.gz: c045958c10ccc83016832e35c7b4c6311faaccf6498bed098dd12201c3308585b7e8545ae82159ba556d2a42fc108c8b615ae3b333380a6fc4f155161e051986
+  metadata.gz: a623ecd594aee77b8f60b8be9d58a31aa2d258f2aae88b8d344529216f38bc2ef6de6cd7d348c9c3f49ac194709a3e9b0f66183ed42d826d6230bd021e2f4e9e
+  data.tar.gz: fc4cf08730ce9a7432ef3a5840b064dd1d2ea2984b9b24be86244d0cface69b31ca08777e5a22ed959b31e7c775c0061bfe4a2dc98fe541afb1901b54c23b25d

data/README.md

@@ -16,6 +16,14 @@ or an example of running a query to list all active scans
 
     nexposecli --config ./lab.yaml --list --SCAN
 
+how to run an adhoc sql query and export via csv
+
+    nexposecli --run --QUERY --config ./lab.yaml --logpath --sql "select * from dim_asset"
+
+or for more complex sql queries, put the sql into a file and run
+
+    nexposecli --run --QUERY --config ./lab.yaml --sqlfile ./new_assets.sql
+
 how to list all reports defined
 
     nexposecli --config ./lab.yaml --list --REPORT

data/bin/nexposecli

@@ -360,6 +360,9 @@ ARGS = %q{
     desc                  : The COMMAND target is only used in conjunction with the --run action
     required              : true
 
+  - name                  : QUERY
+    desc                  : The QUERY target is only used in conjunction with the --run action
+
   - comment               : EVM Action Argument Values
 
   - name                  : host
@@ -427,6 +430,14 @@ ARGS = %q{
     desc                  : The subaction to be performed within the target action
     required              : true
 
+  - name                  : sql
+    desc                  : The sql query to be executed
+    required              : true
+
+  - name                  : sqlfile
+    desc                  : The file containing the sql query to be executed
+    required              : true
+
   - name                  : attempts
     desc                  : The max number of attempts for iterative actions
     required              : true
@@ -532,8 +543,9 @@ uputs("TARGET", "Checking for the requested target")
 @target |= 2048  if args.CONSOLE
 @target |= 4096  if args.TEMPLATE
 @target |= 8192  if args.ROLE
+@target |= 16384  if args.QUERY
 uputs("TARGET", "The requested target value is: #{@target.to_s}")
-raise "You can only submit one target per task, see --help (#{@target})" unless [1,2,4,8,16,32,64,128,256,512,1024,2048,4096,8192].include?(@target)
+raise "You can only submit one target per task, see --help (#{@target})" unless [1,2,4,8,16,32,64,128,256,512,1024,2048,4096,8192,16384].include?(@target)
 
 # nsc conn vars
 unless (
@@ -1703,6 +1715,38 @@ when 8192 # TARGET ROLE
       uputs("ACTION", 'The action requested is not implemented for target: ROLE')
       puts 'The action requested is not implemented for target: ROLE'
    end
+when 16384 # TARGET QUERY
+   case @action
+   when 32  # run
+      uputs("ACTION", 'run QUERY action requested')
+
+      # Read desired sql from cli arg or file, with preference to sql arg
+      sql = ""
+      # EJGNOW
+      if args.sql 
+         sql = args.sql
+      elsif args.sqlfile
+         if File.file?(args.sqlfile)
+            sql = File.read(args.sqlfile)
+         end
+      else
+         STDERR.puts "ERROR [ sql query is empty ]"
+         exit(-1)
+      end
+      uputs("QUERY", "\nRunning [#{sql}]")
+
+      sql_config = Nexpose::AdhocReportConfig.new(nil, 'sql')
+      sql_config.add_filter('version', '2.0.1')
+      sql_config.add_filter('query', sql)
+
+      sql_output = sql_config.generate(@nsc)
+      csv_output = CSV.parse(sql_output.chomp, { :headers => :first_row})
+
+      puts csv_output
+   else
+      uputs("ACTION", 'The action requested is not implemented for target: COMMAND')
+      puts 'The action requested is not implemented for target: COMMAND'
+   end
 else
    # there is no default target
    uputs("ACTION", 'No default action requested')

data/lib/nexposecli/version.rb

@@ -1,3 +1,3 @@
 module Nexposecli
-  VERSION = "0.1.10"
+  VERSION = "0.1.11"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: nexposecli
 version: !ruby/object:Gem::Version
-  version: 0.1.10
+  version: 0.1.11
 platform: ruby
 authors:
 - Erik Gomez